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I P l/^YOD-fe^r^U^-r^D h=r;i/T?^>S IPSEC(IP SECurity) tffcJbtl 
TfcU, IPSECCKtSai^tilLt, M^-H " [RFC1825] Security 
Architecture for the Internet Protocol. ^jf# : R.Atkinson |§ff : IETF" ^ 

[0 0 0 3] 

i p s ECizum-r^m^m^u h^m, ^HBt-^^x-^A^ffjM-rs* 

0>T-iM;, g^g^D hn/l/tCHf ««3fea«il6T, Mi« "Simple Key-Man 
agement For Internet Protocol. ^# : Ashar Aziz, Tom Markson, Hemma Praf 
ullchandra »fj : IETF" ^{CfB*$ tlfe S K I P £B3H;£*l£&fl5#*n e>*lT 

[0 0 0 4] 

A ©^H§gl o T V% £ =b <D 1. £> o 
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coffin ^misK&&&mm<D&m^<z>jjmizMz>z.£iztev, Ammommtf 

[0 0 0 8] 

[0 0 0 9] 

[0 0 10] 
[fffi 5: Z> t=. #> ©#&] 
*2B^lc J^SttfSBglftte:, mmm&*&*>. 3-PgJS#tcK*>f 
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hv-vizm-t&frx hic#LTfi6<D/j%x htfw^&mmzm 
m*mmmi<D**hizfo&-tz>z.£.izj: vmrnzfrz. 

[0 0 1 1] 

lugaS^li. tufBDNS-9— mi <D&* h*^f 2©ta h©£t 

[0 0 12] 

S:^v^t>-&S#^S:ii^> **ay>-f3MgM&l$, «rffi^B8«Kv^t)*# 

mzmmmmn&zfrx hcD^^^y^izMj^-t^^mm^mmDNs-^-Aiz 
m^&t>-i£2>z.inz&*)mmztiz> B 

[0 0 13] 

5 3 £ IC J: o T fcjgffc-T -5 3 L i$T*g Z> . 
[0 0 14] 

JcBM&**-»<z>DNS-fr- Art. htf>^H§ii£: F*>f >£©i:*h£&*&*ft 
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[0 0 15] 

it-r & £ e> tc-rs r t ic j: y 3t/&$ n& 0 

[0 0 16] 
[0 0 17] 

Stale. itflSDNS-9— ^©^H!««3l#aK:, £tBSttl9 

# £ 3 i: & R&ih-T & <fc -3 ic L r i: ic J; »J $ ti £ . 
[0 0 18] 
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%*m& r £ IZ <fc »; tlSc 
[0 0 19] 

[0 0 2 0] 

£olzL1tZ.£lz& »J3SriiSti*.. 
[0 0 2 1] 

T'feSDNSii DNS S:H3K'r**:«)©iaiif^**DN S*-7^©«IB*JKSR 

te> ftlA&o ":£Ci£ : [RFC1035] Domain Names - Implementation and Specif 
ications ^# : P. Mockapetris #§fr : IETF" ^lCfil$!£;txT^5 0 
[0 0 2 2] 

t ^^^^^£^M^m^x^m^nr^-^^-^£^m-t^mmmm^nt^ 

*t t8fffi©ABI«S:*3Sf ft^a^UJffi^- * £ £ \z J: 

raw&*>*© F*4>£izttfai'2>2iffim : $:** Mcjs^-t-sr ttf-ess 
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[0 0 2 3] 

fgJfcSgbfcDN Sif WllC«^^££tftf 3 i± grille: <fc »j, /\°>ry h©ft^© 

[0 0 24] 
[^W©HJfe©^] 

[0 0 2 5] 

M 1 SDN SifW^£^fgJ£§gLfc1J--,K^&SKMS (Key Management S 
erver)©H^$:^-r>rn^^^ 0 2 tejfc® bfcD N S ? ^>f T > h ©#|g 

KMS^MKMS • KMS^'JSiytS^y h ©g£l£: ^tl lCtf-^£ 

®i 0(iDNS;^>y K©:7*-vy h©«/£ 

S:ii^-rS®T*fe-5o HI, H2, 07, H8lCfc^T, lOttKMS, 11, 
2 1 ht?-? fflfflffi. 12, 2 2 tel P#13I3P, 13, 23ltTCP/U 
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DPmmm> 1 4»J£5iDNS«lSgP> 151iK^>f>VlP7KW-^ 
16, 2 5teK*-f>£t * • «^W2r^->Ol/, 17, 2 6ttW 

24tt«DNS97>f7>K 2 nt^^^v^-^mmmm^ i 

0 1tt^>yh!7-^, 14 1, 2 4 1 »DN SA^Tf hi§ 14 2ttD 

n s«tas$, 143 te4kmmm^t>-&/'i&®#! i m®. 144 itm^m^mm 

, 24 2liK^^f>li U vOW\\ 2 4 3 l±^^^V>-^t>-&^aiSP, 2 4 4 
^m&WM^ 7 1, 7 5 h A, B, 7 2 — 7 4, 7 6 k£KM S "Z?2b<5„ 

[0 0 2 6] 

[0 0 2 7] 

0KMS £##t3«fc-MC=iU&£#lTV>£ 0 Zirir, h A 7 1 h B 7 5 (D 

>©P§MK:&5KMS "1" 7 2lC*fL/T>}>^ hB 7 5©^|§^S:^V^t>^: 

So #ic/j>^ hB 7 5<n&mm<DT-**&vmz><D&'vi l z^jEtem 

<Difr7. h#JfcX hB 7 5 IZ&V <D*ffi<?Z.}l-tfT*mte^<DT*. *XhA7 

ltt, fffitSril^t^SKMSfflt^t^tS. **hA 
7 1^fMt5KMS»KMS "00" 7 4tfeSi:tS 0 £ fc, KM S "0 0 
" 74©^gg||li, jJn^> A 7 1 (D&teZ-?— fl££j£<*H£;ru fgIE£*iT V^S 

[0 0 2 8] 

KM S "1" 7 2&, /ft* h A 7 1 fre>CD/ftX h B 7 5 ©^ggiitf)-?- # ©H 
^ICMLT, hB 7 Stf^Hli^^-^&^oT&V^^, ±fi0KMS " 

0" 7 3 icm ^oT^5#^, *^hA7 1^fMLT^SKM 
S "0 0" 7 4 lC3fc* h B 7 5©^||§g^^-#£m^££tf#& J:3lCl^£ 
tS. KM S "1" 7 2H /JxX h B 7 5 CD^i®f-^ $:^ot*^ 

*X hB 7 5©^|fii^^-# £^oTV^KMS{C?f£^?£7r?f!fTO 
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lZ±&(DKMSlzm^&t>-& : &ffitfZ> 0 KM S "1" 7 2 £tf>|!0V ^ 
Ct h B 7 5 ©^HiOr - ^ t V\5 KM S ti, KM S "0 0" 7 4 

[0 0 2 9] 

«^^&£tftt£J:5lCM#£n£:KMS "00" 7 4(t g^CDi^l: 
hB 7 5tf)£m§itf>7 :r -#£KMS "1" 7 2 ICjg-Tc KM S "1" 

hA71te. 5t^KMS "00" 7 4©^||&§t£^oTV^fc&^;tiaMIJ8 , e£ 

[0 0 3 0] 

Bff^Lfe— 3^©^aiCj: yjjN^ hA 7 1 te, $XhB7 5 (D^m^^ZM 
[0 0 3 1] 

7£lC, 09. H10£#MLT. DNSA^ry h©7*-77 h«D«t, D 
[0 0 3 2] 

DNSWvMi, ®9^t-j:e)lC, DNS/\y^9 1, ^VN-^t>^9 2 

hJc-d-*n«K«l/a- K©l^t*«TXTl/a - KBu £tu7-f F 1 0 
1, TYPE-7W-;i/Kl 0 2, CLASS7-f-;i/Kl03, Zl©^^l/I3- 

, f-^fi7>f-^Kl0 5, f-^7>f^Kl0 6^f)^„ 
[0 0 3 3] 

U3-Ktbm T Y P E IC J: »J ttftf S ti * ttSt® * *J . 

5TYPE=1 6©Jf«l/n-KK:, ^^H^V^fe-BrW^tF^H^^ 
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9WJ?l 0 6 i©:7-f-;i/K«:8KtfTv*<5. 
[0 0 3 4] 

StaRUn-FilbT, BtfMbfcTXT 1/3- KOffilC. TKU^tK 
y&tKDttJfoZxkirA U3- K (TYPE=1) , • X-Ztt^V 

^r<Z> K^>f>i&^tMXl/3- K (TYPE = 1 5) m§„ 
[0 0 3 5] 

[0 0 3 6] 

KMS10B, *V hV-tfflffl^l 1 I P#L33|S 1 2 TCP/UD 

pmmmist. fifc»DNs*ya»i4fc, K^>f>*/iP7Kuxf-y;i/ 

15^, >f ■ • iff i&f-^ 16^, m^f - ^ 1 7 i: 

&«*.T**fts*i, *y h»7-^fflrai 1 ^i/t*^ h?-* 101 \zmm 

S*lTV*5. jfcfc, tfiSgDN SMI 4 l±, DNS^yhfi»J^»14 1 
DNS^Iil4 2il, «^t)t/^I^514 3i:, «f»* 
#t3SSPl 4 4 fcS:«A.T*«S*lTV>«. 
[0 0 3 7] 

Iff^lCiSVAT. *y M7-^1W»9J1 1 KMS 1 0 fcl ht7-* 1 

0 1 £&&ttLTV*«. I PflygflS 1 2l±, ^>^>7-i'|IWllffi±mcS) 
oT, I P (Internet Protocol) {C £ oT^ *J % »J $ ft* W <y h ©jg|£te*&SI 
fcff?., TCP/UDPffllSPl 3», I PgtSgpi 2©_h&lC&oT, TCP 
/U D P (Transmission Control Protocol/User Datagram Protocol) \Z<i:-oX 

^yjRystiswy hoi^a^^o zlzx% #&c, tcp/udpu 

3Sgpi 3&. DNStcSfly aT&tifcV^ry b#f?:So^^ h^fft^i: 
*(DJ*>ry h&Jft3gDN S^S^Sl 4 5£{C, D N S gt-MS 1 4 
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UDP#13I3P1 3 1Zt£Z> 0 
[0 0 3 8 ] 

Jfe^DNS^a^Sl 4lCfctt&DNS/\°>ry 4 1 TCP/ 

u d p^iss i 3 & e> d n s jvt v v *K 010 IZTjk-tffim^- 1 0 6 1 

fcHTDNSgtSgPl 4 2, ^^VA^fc-fr/^^ftaiglJl 4 3. 

3g^Sl 4 4 © 3 o©|^© if 4l^(C DNS A^r 7 h £}g y DNS#t3Sg&l 

4 2lt T C P / U D P ®ia 1 3 ^ e> ©f *© DNS A^r h y , K 

>£t- I P7KW-^H 5©^*fett3i> hU©jiiUS:fT^o 
V^t>i±/jS^SS 1 4 3te, •ffi<Z)KMS}^)^^©^li^Z)^V^^•fci±$:^£§KD 
N S A>r y h 0^t' T C P / U D P 1 3 ^ f> f i-tKo t f , imvvS-t>1* 

[0 0 3 9] 

f*>t • • 6 1*, S3c^-r<fce)tc, F*>f> 

^31, ^Hi3 2, h ^fitS KM S 5i)«#Wfef f f i& 3 3 , 

£#ttfcKMS£3 4. 3i> hU©fefiR«Fj^&at'r*>f AX^>^3 505o© 
3g@*^J&S 0 ^^V>^fc-&/^^SBP 1 4 3 te, %u F*>r 

0KMSAi?fi&©M#S£f}t*\ «^g£*tL3Ig|S 1 4 4lC<fcoT£; 

/S£»13P 1 4 3 tt, F*-f>£ • 6 lcx>b>J^ 

fcV>£:£, flS©KMSlC*fLT, ^V%-^fc-&©^>ofc F*>f >£©4*HM*«:iai^ 
/\°>ry h&TCP/UDPgtMSl 3§IltMn. 
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[0 0 4 0] 

KMS 1 Ott, ®MUWr-Z 1 7^o„ M&if^-* 17(t g 
4)-© K*-f • teffimi 7 1, DN S<Dm*Mmzt$^T±$L<DKMS<D 

>r >£i 7 2, s&m^m&izis^TTmz&zibvxDipT'mm-tzKMs 

<D K*>f >i& - Ikffimi 7 3^e>f&£„ KMSlOlt fifi^KMStC^^HS:^ 
[0 0 4 1 ] 

[0 0 4 2] 

7fc*h2 0W:. *y hV-^Um^2 1 IPW2 2ii, TCP/UD 
P&S^ 3 J£§gDNS^^>TT>h24i:. K* -f ■ <kHg|l • 
*r-^2 5i:, 1OT«#7=-# 2 6 ir^PciU^^ MISSIS 2 7 
*.T«t/££*l, *y h^-^MMl 1 S:^L/T I P*y h?-? 10 1 ICg^g 
SJlT^So JMDNS?^>fT>h24H:, DNSWyM^W 

24U, K* >f U VOl/A 24 2L tefflmm^&t> 2 4 3 « 

[0 0 4 3] 

fttaSlCfcV^ 3j>Xh2 0li. KMShl^iC, * *y h V - 9 W&% 2 1 , I 
P4W8P2 2. TCP/UDPMIi2 3^, I P % v h V- >? 2 0 1 tCg£ 

i^$tiTv^s„ TCP/uDP^ai$2 3n dn stctjy ^Te>*ifcv^y h 

4lCi£5 0 *£tC J£SgDNS^^>fT>h2 4tt. ee>4«Lfe;^9 h £StM 
•TSi:^, ^<Z>r?>ry h$:TCP/UDP^llI5 2 3 lci£& 0 
[0 0 4 4] 

ffi^DNS^7>f7>h24W©DNSA 0 ^y hjg U 2 4 1 TCP 

/UDP^SSP2 3 *>e>DN SA4-y h&Sttflfcy* DNSa>v ^<7>rf»#S:MT 
K^-f^&U 4 2, ^g||t^V^t)i±«Lag|5 2 4 3 <D V^tlfr IC*Q.3S£ 

«y#tt*. K^>f>*'J^2 4 2B:, »DN S*^>f7> hil^lC 
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ifelcMlS-rS I P7 KUX$:F^V>^-t>-&S^ K^^^'Jl/;Wt2 4 2l±, T 
CP/UDPflt3gg|5 2 3 fcatUTIfflV^blir/^y h£2Hrr£ 0 K*>f >£U 
vOW*2 4 2&, |^V^;foi±lC^i-£j£^*jTCP/UDP#t3SgP2 3 £®LT 

[0 0 4 5] 

^HS^Cfc yfrfetc#Mbfe^^^-;i/T^S^II^v^*)i±^M2 4 3 

2 5ic^#b, r^imic^^s:^vN^t>-ftic^<ttfic#M-r'5o m^Si&fltsap 
244H temmm^frizmmmz 4 3#^ttifcofc^ii§i^fif#Kc^T, 

WJBIRKpt 2 -* 2 6rt©fffltSKMS0K^>f^ - £jH§^2 6 3 £#Ml/T 

&H§tt ©ft ?B T- £ 5 £ flS^-T & c 
[0 0 4 6] 

^H^V>^t>-&^agP 24 3it fit £ KMSCK^'f^ - 2^11 2 6 

s©F^>f^2 6 2t&i^ 4kmmm^t>i*:mm®2 4 3 it. &mmzm 

SS2 4 3^^bfc«M*B#tf>^|l§§ilC^5V>T, ^©^iC^oT-fe^ra-U 
[0 0 4 7] 

#ClC H4lC^-T^n-, jJ>X h • KMS^StFKMS • KMSI^T'^ 
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[0 0 4 8] 

®7lCfcV^, KM S "0" 73. KM S "1" 72, KM S "2" 7 6, K 
MS "00" 74te, Ml JCcfcUfi^Ufe^^ifoKMSTrfey, *X 
NA71, B7 5», 02tCj:Uii^bfc#^©i£^bfcDNS^^-rT> 
«ilgS:#0/J>X ht'^S, f bt, KM S "0 0" 74li, >f x x 
0*y W->7 7 0 1 IC&ffiStu KM S "0" 7 3H F*-f>£a. x x 5: 
7 0 2lCg^s$*lTV^ 0 Jft*hA71i:KMS "1" 

7 2fc(t R*>f>£b. a. x x£|#o*y ht7-# 7 0 3 JCg&fcStu 
hB75i:KMS "2" 7 6h&, R*-f>£c. a. x x y V V~ ? 

7 0 4lC^$tlTV>S 0 
[0 0 4 9] 

K*>f>£tt, Pg«fll*g£f&l/T;i5U, #KMSlt '&%;(DDN SV—A<D® 
«I£t>l|lfcLT^So 08lCm-TM^ *X hB 7 5©£^i|(Df}f#£K 

MS "2" 7 6©WoT^5i^©#KMS©i^^ltfc'J, £ fc, H 
8{C^-T#^N3tt, *X bA7 1 hB 7 5©£HHH$:Ifc#'rS|^tC, 

[0 0 5 0] 

S (K, [a, b, c] ) : «KJC J: »; * y -fe-S? [a, b, c] IC«^£ 
D (X) : X© R*>f 

S (X) : x<D&mm 

T (X) : XtiDftftftt 

I P (X) : X<D 
KM S (X) :X^t^5:^tSKMS 
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[0 0 5 1] 

J£*T> 3j-abA7l!i)'l?f^5:IttSKMS^KMS "0 0** 74t^ 
[0 0 5 2] 

(1) JfcXhAtt, *X hB 7 5<Z>^H£m^fri±5/\°>r>y h £ KM 

s "i" 7 2jc^iMi-So z.<D4kmmzm^&t>i*:z>rt>rv hit. msiz^s 

S (T (A) , [D (B) , KM S (A) , IP (A) , D (A) ] ) 

-e&y, z.ntt. M&e>%.mfrt>mM-£%z> &oiz. *;*hB©K;*-f * 

X h A^t?f i& t S KM S , >ft* h A<D I P T K Is*. 3^^hA©h7 

KM S "1" 7 2 b A 7 1 j^e>>fc* hB 7 5 ©^^|t ?r^V^t)-& 

T^£«^££ji,£o «^£fll3Ig|S 1 4 4 te, • <kH§£t - 

6^£/}>;* h A 7 1 ©^|g^&^y /t^ry 
tlT^V>*^^$:^©^^$:^oT^-rS (^^^^"4 1) „ 
[0 0 5 3] 

(2) KMS "1" 72li, Xfy^4 10|!ltT% f^V^;fc>1*/\ 0 >ry h#Bj(^ 

s*iTv^fc»#, ^(Drtvv hzmmisTmrnzmrh. m^t>i*jvrv hit 
&m,tztiT^te^mar. m 1 izBt^mmm^t>-&/^mm^ 143 

«fKJK_ha^TV^S»#, i^x>HJi:Mt Uf>^4 3, 4 2) „ 
[0 0 5 4] 

(3) Xf^4 20«, K^>f>i&-^il-t^fi&T-yM 6{CX 
>h'JWofeilt, 07i:^fKMS " 1 " 7 2(D£iffimm^&t>-&/fe& 

mmmi 4 3«, ^v>-^t>-ti:©$>ofc^^hoDK^>r>i&i:gi>©K^>r>i&h 

0 7lC;l3^T, (^V^fcit©** S#B 7 5-lr&£^£\ B7 5®at-5^ 
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yhC-^K^-f^c a. xx£KMS "1" 7 2 ©JltS * y h V~ 9 
© K*-f >£b. a. xx&— iJtb^VN Uf'V^4 4) „ 
[0 0 5 5] 

(4) *-ry:74 4©^lCfeV>T^y hU-^ffiW-tltfct, 07© 
KM S "1" 7 2tt, *XhA7 1lzMVTfcXhBlzM^£&mmtf^M®:T° 

[0 0 5 6] 

(5) XTVZfl 4 ©f^lC^T^y hy-#©&B&#-£jCL&;fro£:£^ 
KM S "1" 7 2it ®1 \ZtfZ>-®M$kWr-Z 1 7 ft0±S0KMS CD K*>f 
>i& 1 7 2 ^:#ll/T^V^^t)t^fc^:ll^ KM S "0" 7 3{C^^ NB 7 5© 

S(T(KMS1), [D (B), KMS(A), IP(KMSl), D(KMS1)]) 
*XbB7 5©K^>f>^ ift* hA 7 1 *^fi&^||^tSKMS 
©K^W>ife, KM S "1" 7 2fflIP7KU^KMS "1" 7 2©F^>f 

>^5^yt-^i:u km s "i" i 2<D^^m^n^m^x(D^h-t^>n^m 
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